https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-24T20:27:30.979465+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2020-7602 CVE-2020-7602 2026-10-24T20:27:30.980559+00:00

Affected: node-prompt-here

node-prompt-here through 1.0.1 allows execution of arbitrary commands. The "runCommand()" is called by "getDevices()" function in file "linux/manager.js", which is required by the "index. process.env.NM_CLI" in the file "linux/manager.js". This function is used to construct the argument of function "execSync()", which can be controlled by users without any sanitization.